Did #cloudflare's 1.1.1.1 domain just suddenly change their certificate issuer from DigiKey to SSL.com? I can't find much on their website about this.
Their Digikey Root CA should have been valid until 2038, but 1.1.1.1 now refuses to negotiate under this key, at least on #mikrotik
Strange... 